EUVD-2026-117646

Buku bukuserver through 5.1.1 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server request internal hosts by supplying a url parameter to /api/fetchdata or /api/networkhandle. Attackers can target loopback, private, or cloud metadat...